Splunk SPLK-2002 Practice Questions| TestInsights

Question 1

Of the following types of files within an index bucket, which file type may consume the most disk?

ARawdata

BBloom filter

CMetadata (.data)

DInverted index (.tsidx)

Correct : B

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

ARawdata

BBloom filter

CMetadata (.data)

DInverted index (.tsidx)

Question 2

When converting from a single-site to a multi-site cluster, what happens to existing single-site clustered buckets?

AThey will continue to replicate within the origin site and age out based on existing policies.

BThey will maintain replication as required according to the single-site policies, but never age out.

CThey will be replicated across all peers in the multi-site cluster and age out based on existing policies.

DThey will stop replicating within the single-site and remain on the indexer they reside on and age out according to existing policies.

Correct : B

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AThey will continue to replicate within the origin site and age out based on existing policies.

BThey will maintain replication as required according to the single-site policies, but never age out.

CThey will be replicated across all peers in the multi-site cluster and age out based on existing policies.

DThey will stop replicating within the single-site and remain on the indexer they reside on and age out according to existing policies.

Question 3

Which of the following should be done when installing Enterprise Security on a Search Head Cluster? (Select all that apply.)

AInstall Enterprise Security on the deployer.

BInstall Enterprise Security on a staging instance.

CCopy the Enterprise Security configurations to the deployer.

DUse the deployer to deploy Enterprise Security to the cluster members.

Correct : A, D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AInstall Enterprise Security on the deployer.

BInstall Enterprise Security on a staging instance.

CCopy the Enterprise Security configurations to the deployer.

DUse the deployer to deploy Enterprise Security to the cluster members.

Question 4

How does the average run time of all searches relate to the available CPU cores on the indexers?

AAverage run time is independent of the number of CPU cores on the indexers.

BAverage run time decreases as the number of CPU cores on the indexers decreases.

CAverage run time increases as the number of CPU cores on the indexers decreases.

DAverage run time increases as the number of CPU cores on the indexers increases.

Correct : C

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AAverage run time is independent of the number of CPU cores on the indexers.

BAverage run time decreases as the number of CPU cores on the indexers decreases.

CAverage run time increases as the number of CPU cores on the indexers decreases.

DAverage run time increases as the number of CPU cores on the indexers increases.

Question 5

In a distributed environment, knowledge object bundles are replicated from the search head to which location on the search peer(s)?

ASPLUNK_HOME/var/lib/searchpeers

BSPLUNK_HOME/var/log/searchpeers

CSPLUNK_HOME/var/run/searchpeers

DSPLUNK_HOME/var/spool/searchpeers

Correct : C

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

ASPLUNK_HOME/var/lib/searchpeers

BSPLUNK_HOME/var/log/searchpeers

CSPLUNK_HOME/var/run/searchpeers

DSPLUNK_HOME/var/spool/searchpeers

Curious about Actual Splunk Enterprise Certified Architect (SPLK-2002) Exam Questions?

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users: